Know what counts.
Think we missed something? DM @vladbochok.
AI tool data policy
Allowed with OpenRouter
Any public open-source repository is allowed. The internal repositories listed here are also allowed because they are forks of open-source projects.
| Repository | Why it is allowed |
|---|---|
| All public open-source repositories | Code that is already publicly available under an open-source license. |
| zksync-airbender-private | Internal fork of zksync-airbender. |
| zksync-airbender-prover-private | Internal fork of zksync-airbender-prover. |
| zksync-crypto-private | Internal fork of zksync-crypto. |
| zksync-protocol-private | Internal fork of zksync-protocol. |
| zksync-era-private | Internal fork of zksync-era. |
| zksync-os-server-private | Internal fork of zksync-os-server. |
| zksync-os-private | Internal fork of zksync-os. |
For any other private repository, check with the organizer before sending code to OpenRouter.
Impact in scope
| Critical | Unauthorized asset movementA way to steal, redirect, or mint assets without permission. |
|---|---|
| Critical | Invalid proof or state acceptedA broken verification check that accepts an invalid proof or unauthorized state transition. |
| Critical | Emergency upgrade or immediate protocol riskAny bug that requires an emergency upgrade procedure, or puts user funds or protocol safety at immediate risk. |
| Critical | Remote code execution on running servicesA reproducible way to execute attacker-controlled code on a running service or production process. |
| High | Unauthorized access or privilegeBypassing access controls, crossing a tenant boundary, or performing a privileged action. |
| High | Implementation divergenceA mismatch between in-circuit and out-of-circuit implementations where the in-circuit behavior is accurate, such as an overconstraint. This applies to Era, ZKsync OS, and other in-scope systems; severity also depends on the likelihood of triggering the divergence. |
| High | Private data or secret exposedEvidence that an attacker can read information they should not access. |
| Medium | Service or transaction disruptionA reproducible attack that prevents normal operation, with its reach and recovery conditions. |
| Medium | Misrepresentation of data on websitesA reproducible issue that causes a website to display materially incorrect or misleading data. |
Points
Severity is not determined by the bug class alone. Judges weigh both security impact and the likelihood that the issue can occur.